This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RJ9yCa8Tm2ssre4T18gVg1yaDkI.roa File: RJ9yCa8Tm2ssre4T18gVg1yaDkI.roa (raw, json) Hash identifier: jyx7wveeMmIXEqNvEGUZyNDwZgv+Ga9EQAJUmEnep/Q= Subject key identifier: 44:9F:72:09:AF:13:9B:6B:2C:AD:EE:13:D7:C8:15:83:5C:9A:0E:42 Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0 Certificate serial: 019B7DCBA751EBF44A788CD2CC2169F36738 Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RJ9yCa8Tm2ssre4T18gVg1yaDkI.roa Signing time: Fri 02 Jan 2026 08:20:57 +0000 ROA not before: Fri 02 Jan 2026 08:20:57 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 273478 IP address blocks: 151.244.241.0/24 maxlen: 24 151.244.245.0/24 maxlen: 24 151.245.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Jan 2026 21:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7d:cb:a7:51:eb:f4:4a:78:8c:d2:cc:21:69:f3:67:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0 Validity Not Before: Jan 2 08:20:57 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=449f7209af139b6b2cadee13d7c815835c9a0e42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1f:68:d5:c3:b1:23:9f:d0:ee:ce:51:05:f8: b2:65:9a:f3:53:eb:18:65:a0:3f:cb:39:1a:c5:9a: bb:e4:ab:00:0f:dc:44:96:bf:36:7c:b8:f1:4d:61: f7:4b:3b:bb:b4:da:17:36:09:44:df:b9:fc:50:4d: 52:1d:d3:4f:18:36:14:ca:10:e6:45:ff:5b:c3:a9: 8b:bf:ea:0e:d0:d0:ac:66:f3:2f:69:4f:24:43:fc: 1f:41:9a:d6:bd:85:ab:86:ac:67:73:27:95:6c:f7: 07:02:a0:b6:22:94:98:b9:b5:98:76:62:ea:fc:d8: 93:75:22:ec:ef:fb:db:39:1c:57:64:3a:8b:c3:be: 76:ea:3c:83:02:19:d6:91:af:3e:8c:b0:46:17:93: ba:22:f5:b9:0f:9f:24:d7:0c:09:64:82:34:e7:f8: d6:7b:11:4f:71:e6:96:12:92:98:cb:8e:99:65:d5: 16:32:11:9f:18:d6:e2:98:8e:1f:08:a9:5f:82:2d: 9a:0f:e2:29:ba:8b:16:8e:fd:27:e8:ff:9f:52:7e: d3:0c:93:ac:70:4e:b4:50:c9:83:71:00:fb:bf:79: 22:0a:90:67:fe:4a:a7:90:f3:ce:df:c2:30:a6:81: 25:bc:d9:36:63:88:94:bf:2d:a6:bc:8f:5e:21:22: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:9F:72:09:AF:13:9B:6B:2C:AD:EE:13:D7:C8:15:83:5C:9A:0E:42 X509v3 Authority Key Identifier: keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/RJ9yCa8Tm2ssre4T18gVg1yaDkI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 151.244.241.0/24 151.244.245.0/24 151.245.242.0/23 Signature Algorithm: sha256WithRSAEncryption a2:b0:65:97:29:e6:56:d5:f1:d5:91:2f:dd:80:c5:c4:00:ef: 8c:da:06:d1:38:4a:61:be:12:11:9e:5a:6d:e8:b5:c7:41:93: 30:75:94:00:a0:77:73:46:09:21:c5:77:af:d2:35:ca:f5:67: aa:e2:0c:64:97:04:c6:de:5d:b8:bd:7c:c2:04:cc:6e:3a:8c: f0:1b:b9:6f:8d:13:ce:57:9e:ab:19:e2:c9:ad:88:17:18:ca: cd:e7:2c:4a:68:0e:26:d9:38:a7:81:7e:65:9d:c8:7e:30:9a: f9:41:07:50:03:1d:7e:26:37:bb:b8:3f:67:82:0b:44:b9:94: 8e:53:cc:66:57:26:08:be:95:b2:b9:05:45:69:f9:d7:e8:f9: 2c:69:18:8d:c7:92:fe:c7:81:c8:9b:54:35:fe:35:a1:6a:22: f6:9d:6b:74:be:32:0a:3e:50:7b:69:7f:50:76:3a:ea:21:51: 5c:f1:3a:64:87:5c:b8:f9:a0:5c:d9:97:47:0e:da:79:56:9a: fc:f4:f5:19:de:cf:cf:64:34:9c:d9:a3:7b:09:39:6e:ec:21: df:9a:08:a2:66:5a:83:30:28:f0:74:ab:d7:aa:eb:3e:5c:c0: 8d:33:e4:de:9c:e7:e8:ab:1c:45:d4:e1:c2:1f:36:48:a9:61: 67:c8:d9:42 -----BEGIN CERTIFICATE----- MIIFCTCCA/GgAwIBAgISAZt9y6dR6/RKeIzSzCFp82c4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh NWE0YzAwHhcNMjYwMTAyMDgyMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg0NDlmNzIwOWFmMTM5YjZiMmNhZGVlMTNkN2M4MTU4MzVjOWEwZTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvB9o1cOxI5/Q7s5RBfiyZZrzU+sY ZaA/yzkaxZq75KsAD9xElr82fLjxTWH3Szu7tNoXNglE37n8UE1SHdNPGDYUyhDm Rf9bw6mLv+oO0NCsZvMvaU8kQ/wfQZrWvYWrhqxncyeVbPcHAqC2IpSYubWYdmLq /NiTdSLs7/vbORxXZDqLw7526jyDAhnWka8+jLBGF5O6IvW5D58k1wwJZII05/jW exFPceaWEpKYy46ZZdUWMhGfGNbimI4fCKlfgi2aD+IpuosWjv0n6P+fUn7TDJOs cE60UMmDcQD7v3kiCpBn/kqnkPPO38IwpoElvNk2Y4iUvy2mvI9eISKxgwIDAQAB o4ICFTCCAhEwHQYDVR0OBBYEFESfcgmvE5trLK3uE9fIFYNcmg5CMB8GA1UdIwQY MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt MTdiOWRlMTQxMjUyLzEvUko5eUNhOFRtMnNzcmU0VDE4Z1ZnMXlhRGtJLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAl/TxAwQA l/T1AwQBl/XyMA0GCSqGSIb3DQEBCwUAA4IBAQCisGWXKeZW1fHVkS/dgMXEAO+M 2gbROEphvhIRnlpt6LXHQZMwdZQAoHdzRgkhxXev0jXK9Weq4gxklwTG3l24vXzC BMxuOozwG7lvjRPOV56rGeLJrYgXGMrN5yxKaA4m2TingX5lnch+MJr5QQdQAx1+ Jje7uD9nggtEuZSOU8xmVyYIvpWyuQVFafnX6PksaRiNx5L+x4HIm1Q1/jWhaiL2 nWt0vjIKPlB7aX9QdjrqIVFc8Tpkh1y4+aBc2ZdHDtp5Vpr89PUZ3s/PZDSc2aN7 CTlu7CHfmgiiZlqDMCjwdKvXqus+XMCNM+TenOfoqxxF1OHCHzZIqWFnyNlC -----END CERTIFICATE-----Generated at Sun Jan 18 06:30:32 2026 by rpki-client